PRIVACY POLICY
Effective date: 6 September 2026 Previous version: 17 April 2026
1. Who we are
EWAcompany is a trading name of PPHU NONAME, a handcrafted furniture workshop based in Poland.
PPHU NONAME, Krajowa 165, 63-611 Mroczeń, Poland Email: store@p6o9i2u5y8t1.site Phone: +48 723 794 923 Tax ID (NIP): PL6191961787
We are the data controller responsible for your personal data. If you have any questions about how we handle your information, contact us at store@p6o9i2u5y8t1.site.
2. What data we collect
When you use our website, create an account, subscribe to our newsletter or place an order, we may collect the following information:
Account and order data — name, email address, phone number, billing and shipping address, order history, and payment method. Card details are processed directly by our payment providers and are not stored by us.
Communication data — messages you send us by email or through our contact form, including any attachments.
Website usage data — IP address, browser type, device information, pages visited, session duration and referral source. This data is collected through cookies; see our Cookie Policy for details.
Newsletter data — your email address, the date and confirmation of your subscription, and the discount code issued to you. To confirm your subscription we use a double opt-in process, which means we also record the fact that you clicked the confirmation link sent to your address.
Technical anti-abuse data — we temporarily record the IP address used to submit the newsletter form in order to limit the number of submissions from a single address and prevent automated abuse.
Marketing data — your preferences regarding newsletters and promotional communications.
Providing your data is voluntary, but some of it is necessary to perform specific actions. Without delivery and contact details we cannot process an order, and without an email address we cannot send you the newsletter or the discount code.
3. Why we process your data
To fulfil your order — processing payments, arranging production and delivery, sending order confirmations and tracking information. Legal basis: performance of a contract.
To manage your account — if you create one, maintaining your login, order history and preferences. Legal basis: performance of a contract.
To communicate with you — responding to enquiries, handling complaints and warranty claims, providing customer support. Legal basis: performance of a contract and legitimate interest.
To improve our website — analysing how visitors use the site so we can improve content, navigation and performance. Legal basis: legitimate interest (for anonymised data) or your consent (for analytics cookies).
To send marketing communications — newsletters, product updates and promotional offers, only if you have given your consent. Legal basis: consent. You can unsubscribe at any time using the link in every message.
To issue and honour a newsletter discount code — generating a single-use discount code, sending it to you by email and validating it at checkout. Legal basis: consent for the subscription itself, and performance of a contract when the code is used in an order.
To protect our website and our promotions from abuse — limiting repeated submissions from the same IP address and preventing multiple discount codes being obtained by automated means. Legal basis: legitimate interest.
To comply with legal obligations — tax records, consumer protection requirements, product safety obligations, and responding to lawful requests from authorities. Legal basis: legal obligation.
We do not make decisions about you based solely on automated processing that would have legal effects or similarly significantly affect you, and we do not carry out profiling for such purposes.
4. Who we share data with
We do not sell your personal data. We share it only with the following categories of service providers, who process data on our behalf and under our instructions:
Payment processors — [list only the providers actually enabled on your checkout] — to process your payments securely.
Shipping carriers — to deliver your order.
Hosting and email delivery services — to operate the website and send transactional messages such as order confirmations.
Email marketing platform — MailerLite — to manage newsletter subscriptions, store your subscription status and the discount code assigned to you, and send marketing messages where you have opted in.
Analytics providers — Google Analytics — to understand website usage. IP addresses are handled in accordance with the provider’s current anonymisation practices.
Advertising platforms — Meta (Facebook), Google Ads — only if you have consented to marketing cookies.
All service providers are bound by data processing agreements requiring them to protect your data in accordance with applicable law.
5. International transfers
Some of our service providers are based outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including the EU–U.S. Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or another mechanism recognised under the GDPR. You can request more information about the safeguards applied to a specific transfer by contacting us.
6. How long we keep your data
Order and accounting data — 5 years counted from the end of the tax year in which the transaction took place, as required by Polish tax and accounting law.
Account data — until you delete your account or ask us to delete it, subject to the retention periods above for completed orders.
Newsletter and marketing data — until you withdraw your consent or unsubscribe. After that we retain a record of the withdrawal itself for as long as needed to demonstrate that we stopped sending messages.
Discount codes — for the validity period of the code and then for as long as the related order records are kept.
Technical anti-abuse data — [X hours/days — enter the actual lifetime of the rate-limit record].
Website usage data — for the retention period configured in our analytics account, currently [X months].
Communication records — up to 3 years after the last interaction, unless a longer period is required for warranty, complaint handling or legal purposes.
After the retention period, data is securely deleted or irreversibly anonymised.
7. Your rights
Under the General Data Protection Regulation, you have the following rights:
Access — request a copy of the personal data we hold about you. Rectification — ask us to correct inaccurate or incomplete data. Erasure — ask us to delete your data, subject to legal retention requirements. Restriction — ask us to limit how we process your data in certain circumstances. Portability — receive the data you provided in a structured, commonly used and machine-readable format, and have it transferred to another controller. Objection — object to processing based on our legitimate interest. Withdraw consent — where processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact us at store@p6o9i2u5y8t1.site. We will respond within one month of receiving your request. If your request is complex or we receive a large number of requests, we may extend this period by up to two further months and will inform you of the extension and the reasons for it.
If you believe your rights have not been respected, you have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warszawa, Poland, https://uodo.gov.pl.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. These include encrypted connections (SSL/TLS), payment processing handled by certified external providers, access to personal data restricted to authorised persons, and two-factor authentication on administrative accounts.
No system is completely secure. If you become aware of any security issue relating to your account or our website, please contact us immediately.
9. Children
Our website and services are not directed at children under the age of 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or in legal requirements. The current version is always available on our website with the effective date shown at the top. For material changes we will notify you by email or through a notice on the site.
11. Contact
For any questions about this policy or your personal data:
store@p6o9i2u5y8t1.site +48 723 794 923, Monday–Friday, 9:00–17:00 (CET)
PPHU NONAME, Krajowa 165, 63-611 Mroczeń, Poland